CVE-2004-0161

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=109524928232568&w=2
http://www.uniras.gov.uk/vuls/2004/380375/mime.htm	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/9274

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:clearswift:mailsweeper:4.3.7:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.8:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.10:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.11:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.13:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.14:::::::*
	cpe:2.3:a:clearswift:mailsweeper:4.3.15:::::::*
	cpe:2.3:a:f-secure:internet_gatekeeper:6.3:::::::*
	cpe:2.3:a:f-secure:internet_gatekeeper:6.4:::::::*
	cpe:2.3:a:f-secure:internet_gatekeeper:6.31:::::::*
	cpe:2.3:a:f-secure:internet_gatekeeper:6.32:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:::::::*
	cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:::::::*

History

No history.

Information

Published : 2004-10-20 04:00

Updated : 2017-07-11 01:29

NVD link : CVE-2004-0161

Mitre link : CVE-2004-0161

CVE.ORG link : CVE-2004-0161

JSON object : View

Products Affected

f-secure

internet_gatekeeper

clearswift

mailsweeper

paul_l_daniels

ripmime

CWE

NVD-CWE-Other

{"id": "CVE-2004-0161", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-10-20T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=109524928232568&w=2", "source": "cve@mitre.org"}, {"url": "http://www.uniras.gov.uk/vuls/2004/380375/mime.htm", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/9274", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients."}, {"lang": "es", "value": "M\u00faltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan codificicaci\u00f3n RFC2231, lo que puede ser interpretado de forma variable por clientes de correo."}], "lastModified": "2017-07-11T01:29:56.243", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA12B965-672C-444D-9774-0F76FE47EA29"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6C9B32C-5EC9-46BD-AA77-F414A143576C"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "823C27EB-C00F-4A7E-B832-013A50A1EE2D"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD217379-28E7-465E-843D-E7204EE0E89F"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB96CB8A-59F3-4624-B2BA-687ECF929B79"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04A02C12-547E-4086-A409-53AA68F1A4D5"}, {"criteria": "cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8185FBF2-D678-4D90-A5AC-F9B06DFED95F"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC782BFC-6BA0-4823-8A6D-F7D83F55393C"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1B09025-47B9-4F77-9DA6-80885E9A4EC4"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E021143-608B-44A2-84FB-8F8AC00A9985"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AC4686E-B92F-47ED-90DA-42AF650521D2"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80EF73F0-1FE1-4041-9C07-A89D153DA41F"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF45C4F8-A20C-4D7D-B203-AF36FB046C63"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75222D1B-1384-4C74-A54F-BC028C5CDB69"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5129FD4-C011-4EA9-B8A1-256E95494FE6"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F33D78C-9CD1-49A6-A43E-D0187600C033"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E725208-BA0C-41D9-BC45-84577A94AAA1"}, {"criteria": "cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}